CLAIMS 



1 . A process for storing and recovering security information stored on a first 
smart card that is used to uniquely access a client computer and secure logins into 
networks and Web sites, comprising the steps of: 

providing a secure server; 

creating a password and challenge question; 

wherein said password is used to access said server if said first smart card 
is lost and said challenge question is used to confirm the user's identity when 
challenged while accessing said server without a smart card; 

retrieving the ID number of said first smart card and other user and system 
sp ecific information; 

storing said first smart card ID and said other user and system specific 
information on said server, 

providing access key creation means on said server for creating a first 
access key; 

storing said first access key on said server, and 

providing configuration means for configuring said client to boot only if said 
first smart card is readable by said client orsaid first access key is entered. 

2. The process of claim 1, wherein an emergency diskette is created and 
said client can boot using said diskette instead of said first smart card. 

3. The process of claim 1, wherein the user accesses said server through 
another computer; wherein said server requires the user to log in; and wherein 
said server displays said access key to the user if said log in is correct. 

4. The process of claim 1, wherein the user enters said first access key into 
said client; and wherein said client boots in response to said first access key. 

5. The process of claim 1 , further comprising the steps of: 

wherein the user requests that said server issue a second smart card to 
rep lace said first smart card; 

wherein the user makes said request through said client; 

retrieving the ID number from said second smart card; 

replacing said first smart card's ID with said second smart card's ID on said 
server; and 
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wherein said configuration means configures said client to boot if said 
second smart card is readable, thereby replacing said first smart card. 

6. The process of claim 5, wherein said server requires the user to enter the 
5 proper use rand/or other system specific information to validate said request. 

7. The process of claim 5, further comprising the step of: 

wherein said access key creation means creates a second access key; 
replacing said first access key with said second access key on said server, 

10 and 

wherein said configuration means configures said client to boot if said 
second access key is entered, thereby replacing said first access key. 

8. The process of claim 5, further comprising the step of: 

15 providing morphing means for recreating the personal computing 

environment stored on said first smart card onto said second smart card. 

9. The process of claim 8, wherein said morphing means transfers the 
encryption and other rights of said first smart card to said second smart card. 

20 

1 0. The process of claim 1 , further comprising the step of: 

wherein said access key creation means creates a second access key 
upon request by the user, 

replacing said first access key with said second access key on said server; 

25 and 

wherein said configuration means configures said client to boot if said 
second access key is entered, thereby replacing said first access key. 

1 1 . The process of claim 1 , further comprising the step of: 

30 providing automatic login means resident on said client for logging onto 

networks and/or Web sites, without the user's intervention, using the user's 
information stored on said first smart card. 

12. A process for storing and recovering security information stored on a first 
35 smart card that is used to uniquely access a client computer, comprising the steps 

of: 

providing a secure server; 

retrieving the ID numberof said first smart card and other user and system 
specific information; 
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storing said first smart card ID and said other user and system specific 
information on said server; 

providing access key creation means on said server for creating a first 
access key; 

5 storing said first access key on said server; and 

providing configuration means for configuring said client to boot only if said 
first smart card is readable by said client or said first access key is entered. 

13. The process of claim 12, further comprising the step of: 
1 o creating a password and challenge question; and 

wherein said password is used to access said server if said first smart card 
is lost and said challenge question is used to confirm the user's identity when 
challenged while accessing said server without a smart card. 

15 14. The process of claim 12, wherein an emergency diskette is created and 
said client can boot using said diskette instead of said first smart card. 

15. The process of claim 13, wherein the user accesses said server through 
another computer; wherein said server requires the user to log in; and wherein 

20 said server disp lays said access key to the user if said log in is correct. 

1 6. The process of claim 12, wherein the user enters said first access key into 
said client; and wherein said client boots in response to said first access key. 

25 17. The process of claim 1 2, further comprising the steps of: 

wherein the user requests that said server issue a second smart card to 
replace said first smart card; 

wherein the user makes said request through said client; 
retrieving the ID numberfrom said second smart card; 
30 replacing said first smart card's ID with said second smart card's ID on said 

server, and 

wherein said configuration means configures said client to boot if said 
second smart card is readable, thereby replacing said first smart card. 

35 18. The process of claim 17, wherein said server requires the user to enter the 
properuserand/orothersystem specific information to validate said request. 

1 9. The process of claim 1 7, further comprising the step of: 

wherein said access key creation means creates a second access key; 
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replacing said first access key with said second access key on said server, 

and 

wherein said configuration means configures said client to boot if said 
second access key is entered, thereby replacing said first access key. 

5 

20. The process of claim 1 7, further comprising the step of: 

providing morphing means for recreating the personal computing 
environment stored on said first smart card onto said second smart card. 

10 21. The process of claim 20, wherein said morphing means transfers the 
encryption and other rights of said first smart card to said second smart card. 

22. The process of claim 1 2, further comprising the step of: 

wherein said access key creation means creates a second access key 
15 upon request by the user, 

replacing said first access key with said second access key on said server, 

and 

wherein said configuration means configures said client to boot if said 
second access key is entered, thereby replacing said first access key. 

20 

23. The process of claim 1 2, further comprising the step of: 

providing automatic login means on said client for logging onto networks 
and/or Web sites, without the user's intervention, using the user's information 
stored on said first smart card. 

25 

24. A program storage medium readable by a computer, tangibly 
embodying a program of instructions executable by the computer to perform 
method steps for storing and recovering security information stored on a first 
smart card that is used to uniquely access a client computer, comprising the steps 

30 of: 

providing a secure server; 

creating a password and challenge question; 

wherein said password is used to access said server if said first smart card 
is tost and said challenge question is used to confirm the user's identity when 
35 challenged while accessing said server without a smart card; 

retrieving the ID number of said first smart card and other user and system 
specific information; 

storing said first smart card ID and said other user and system specific 
information on said server, 
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providing access key creation means on said server for creating a first 
access key; 

storing said first access key on said server; and 

providing configuration means for configuring said client to boot only if said 
5 first smart card is readab le by said client or said first access key is entered. 

25. The method of claim 24, wherein an emergency diskette is created and 
said client can boot using said diskette instead of said first smart card. 

10 26. The method of claim 24, wherein the user accesses said server through 
another computer; wherein said server requires the user to log in; and wherein 
said server displays said access key to the user if said log in is correct. 

27. The method of claim 24, wherein the user enters said first access key into 
1 5 said client; and wherein said client boots in response to said first access key. 

28. The method of claim 24, further comprising the steps of: 

wherein the user requests that said server issue a second smart card to 
rep lace said first smart card; 
20 wherein the user makes said request through said client; 

retrieving the ID number from said second smart card; 

replacing said first smart card's ID with said second smart card's ID on said 
server, and 

wherein said configuration means configures said client to boot if said 
25 second smart card is readable, thereby replacing said first smart card. 

29. The method of claim 28, wherein said server requires the user to enter the 
proper user and/or other system specific information to validate said request. 

30 30. The method of claim 28, further comprising the step of: 

wherein said access key creation means creates a second access key; 
replacing said first access key with said second access key on said server; 

and 

wherein said configuration means configures said client to boot if said 
35 second access key is entered, thereby replacing said first access key. 

31 . The method of claim 28, further comprising the step of: 

providing morphing means for recreating the personal computing 
environment stored on said first smart card onto said second smart card. 
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32. The method of claim 31, wherein said morphing means transfers the 
encryption and other rights of said first smart card to said second smart card. 

5 33. The method of claim 24, further comprising the step of: 

wherein said access key creation means creates a second access key 
upon request by the user, 

replacing said first access key with said second access key on said server; 

and 

10 wherein said configuration means configures said client to boot if said 

second access key is entered, thereby replacing said first access key. 

34. The method of claim 24, further comprising the step of: 

providing automatic login means resident on said client for logging onto 
15 networks and/or Web sites, without the user's intervention, using the user's 
information stored on said first smart card. 

35. A program storage medium readable by a computer, tangibly 
embodying a program of instructions executable by the computer to perform 

20 method steps for storing and recovering security information stored on a first 
smart card that is used to uniquely access a client computer, comprising the steps 
of: 

providing a secure server; 

retrieving the ID number of said first smart card and other user and system 
25 specific information; 

storing said first smart card ID and said other user and system specific 
information on said server; 

providing access key creation means on said server for creating a first 
access key; 

30 storing said first access key on said server; and 

providing configuration means for configuring said client to boot only if said 
first smart card is readable by said client or said first access key is entered. 

36. The method of claim 35, further comprising the step of: 
35 creating a password and challenge question; and 

wherein said password is used to access said server if said first smart card 
is lost and said challenge question is used to confirm the user's identity when 
challenged while accessing said server without a smart card. 
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37. The method of claim 35, wherein an emergency diskette is created and 
said client can boot using said diskette instead of said first smart card. 

38. The method of claim 36, wherein the user accesses said server through 
another computer, wherein said server requires the user to log in; and wherein 
said server displays said access key to the user if said log in is correct. 

39. The method of claim 35, wherein the user enters said first access key into 
said client; and wherein said client boots in response to said first access key. 

40. The method of claim 35, further comprising the steps of: 

wherein the user requests that said server issue a second smart card to 
rep lace said first smart card; 

wherein the user makes said request through said client; 

retrieving the ID number from said second smart card; 

replacing said first smart card's ID with said second smart card's ID on said 
serven and 

wherein said configuration means configures said client to boot if said 
second smart card is readable, thereby replacing said first smart card. 

41 . The method of claim 40, wherein said server requires the user to enter the 
proper user and/or other system specific information to validate said request. 

42. The method of claim 40, further comprising the step of: 

wherein said access key creation means creates a second access key; 
replacing said first access key with said second access key on said server, 

and 

wherein said configuration means configures said client to boot if said 
second access key is entered, thereby replacing said first access key. 

43. The method of claim 40, further comprising the step of: 

providing morphing means for recreating the personal computing 
environment stored on said first smart card onto said second smart card. 

44. The method of claim 43, wherein said morphing means transfers the 
encryption and other rights of said first smart card to said second smart card. 

45. The method of claim 35, further comprising the step of: 
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wherein said access key creation means creates a second access key 
upon request by the user; 

replacing said first access key with said second access key on said server; 

and 

wherein said configuration means configures said client to boot if said 
second access key is entered, thereby replacing said first access key. 

46. The method of claim 35, further comprising the step of: 

providing automatic login means resident on said client for logging onto 
networks and/or Web sites, without the user's intervention, using the user's 
information stored on said first smart card. 
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